Privacy Policy

Last updated:

This policy covers Pocket, our drum machine plugin for Mac and Windows; Pocket Field, our phone app; and this website. Pocket and Pocket Field are made by Nuhu Najeemuddin Shaik and published by The Sample Lab ("we", "us"). If you have a question about your data, write to us at sales@thesamplelab.com.

You buy Pocket in our store at thesamplelab.com. The store is run on Shopify and has its own privacy policy, which covers your order, payment and billing details.

The short version

  • No ads, no tracking, and no analytics in Pocket, Pocket Field or this website.
  • We never sell your personal information or share it for advertising.
  • Your recordings stay on your phone. Recordings and kit covers leave it only on their way to Pocket on your own computer. Loops you send from Pocket travel the other way. We delete our copy as soon as the receiving device has it.
  • You can use Pocket Field without an account.
  • You can delete Pocket Field's data from inside the app at any time, and ask us to delete your whole account.

1. Your account

Pocket and Pocket Field share one account, which comes with your Pocket licence.

  • Your email address. You sign in with a six-digit code we email to you; there is no password. We use your email to find your licence, send sign-in codes and reply to you.
  • Your licence. Its plan and status, and the order reference from our store, so we can match a purchase, a refund or a chargeback.
  • Your sign-in. Our sign-in provider keeps when your account was created and when you last signed in.
  • Your choice about news. Pocket stores whether you said yes to hearing news from us. It is off unless you turn it on, and we don't send any marketing email today.

2. The computers you use Pocket on

When you sign in to Pocket, it activates your licence on that computer. For each computer we keep:

  • a machine ID, made by hashing your computer's own device ID on your computer (we never receive the device ID itself);
  • the computer's name and operating system, for example "Studio Mac (macOS 15.3)";
  • Pocket's version, and when Pocket last checked in;
  • a device token, which we keep only as a hash.

We use this to keep your licence to its number of computers, show you where you're signed in, and deliver your phone's sounds to the right computer. When Pocket downloads a sound pack, we note which pack and when.

3. Pocket Field and your recordings

Pocket Field records sounds with your phone's microphone, only while you're recording.

Without an account, nothing you record leaves your phone. Your recordings, their names and their parts are kept on your phone (and in your phone's own backups, if you have them turned on).

Signed in, Pocket Field sends a recording you keep to Pocket on your computer, but only while Pocket is open on one of your computers. On its way:

  • We hold the audio file, its name, its part (kick, snare and so on), its length, size, sample rate, a checksum and when you recorded it, in private storage that only your account can reach.
  • As soon as one of your computers collects it, we delete our copy of the audio. If none does, the copy expires after 24 hours and is deleted at the next hourly cleanup.
  • A small record with no audio (the recording's name, part, length, and which of your computers collected it and when) stays for 30 days after it was last sent, so Pocket Field can show you where it went.

When you make a kit, we also hold the kit's name, artist name and parts, and the cover photo if you choose one. Only the cropped square is sent, at most 1200 pixels across. The cover follows the same delivery and deletion rules as a recording: its picture is deleted when Pocket collects it, or expires after 24 hours and is deleted at the next hourly cleanup. Its record, without the picture, stays for 30 days after it was last sent. The kit's name, artist name and parts are deleted with its last recording or cover record.

When you send a loop from Pocket to your phone, we temporarily hold its audio, name, tempo, length, size, sample rate, checksum and the computer it came from. It uploads only while your phone can collect it. We delete the audio as soon as Pocket Field collects it; otherwise it expires after 24 hours and is deleted at the next hourly cleanup. The delivery record, without audio, stays for 30 days after the loop was sent. The loop then stays on your phone until you delete it.

So that each side can show the other is open, Pocket Field tells us when it is open and when it asks for loops, and Pocket tells us when it is open on a computer. Each phone check-in replaces the previous time. For each computer, we keep its machine ID, its name and when it was last seen for 7 days after it was last seen.

4. Support and diagnostic reports

  • When you write to us from Pocket, Pocket Field, or by email, we keep your message, its topic, and your email (if you're signed in or you include it). In Pocket, if you tick the box, the message also carries Pocket's version and your operating system's name. We keep support requests for 2 years.
  • Diagnostic reports. After a crash, Pocket offers to send a report and shows you all of it first; nothing is sent unless you press Send. A report holds Pocket's version, the host it ran in (such as the name of your DAW), the plugin format, your operating system and processor, a log of what Pocket was doing (it never includes what you named things), your note if you write one, a summary of your system's crash report (file names and positions in the code, no paths), and the computer's machine ID. We keep reports for 180 days.

5. This website

  • The site is hosted by Vercel, whose servers log requests (including your IP address) for security and to keep the site running.
  • While the site is in preview, a password page sets one cookie, pocket_preview, for 30 days. There are no other cookies, and no analytics or advertising trackers.
  • On a phone or tablet, "Send it to your computer" emails you a link to this site. We use the address once to send that email through Resend and don't save it; to stop repeat sends, our server remembers it, with your IP address, in memory for 10 minutes.

6. What stays on your devices

  • Pocket Field keeps your recordings, kits, cover photos and received loops on your phone, with their names, parts and delivery state. You can also see recordings in the Files app: under On My iPhone, then Pocket Field on iPhone, or under Pocket Field on Android. Android recordings and loops are excluded from cloud backup but included in device-to-device transfer; the sign-in token is excluded from both. If you sign in, your email and a sign-in token are kept in your phone's secure storage.
  • Pocket keeps your licence file (your email, the machine ID and a device token), your sign-in token and your settings on your computer, along with your kits, sessions and presets.

7. Who handles your data for us

We use these providers, only to run Pocket, Pocket Field and this website:

  • Supabase, for our database, sign-in, temporary storage of recordings, kit covers and loops in transit, and server functions. Our project is hosted in the United States (Oregon).
  • Resend, to send email: sign-in codes, receipts, replies and the link this site sends.
  • Vercel, to host this website.
  • Shopify, to run our store and take payments, under its own privacy policy.
  • Apple and Google, who distribute our apps under their own privacy policies.

We don't use analytics services, advertising networks or data brokers, and we don't use your recordings for anything other than getting them to your computer.

8. How long we keep it

WhatHow long
Your account, licence and computersUntil you delete your account
A recording's audio or a kit's cover photo on our serversUntil Pocket collects it; at most 24 hours, deleted at the next hourly cleanup
A recording's or cover photo's record, without audio or picture30 days after it was last sent
A kit's name, artist name and partsUntil its last recording or cover record is deleted
A loop sent from Pocket to your phoneUntil the phone collects it; at most 24 hours, deleted at the next hourly cleanup
A loop's record, without audio30 days after it was sent
Your computers' "Pocket is open" status7 days after last seen
When Pocket Field last checked in or asked for loopsReplaced at each check-in; deleted with Pocket Field's data or your account
Order events from our store (order number, email, what you bought)1 year
Licence reset links2 days after they expire
Sound pack downloads180 days
Support requests2 years
Emails we've sent30 days after sending
Diagnostic reports180 days
Records used to stop abuse (hashes of IP addresses, accounts or devices)2 days

9. Your choices

  • Use Pocket Field without an account. Recording, trimming, tagging, playing and finding your sounds all work signed out.
  • Sign out of Pocket Field at any time from its Settings. That signs out this phone only.
  • Delete Pocket Field's data. In Pocket Field, open Settings, then Delete account, then Delete Pocket Field data. We delete everything Pocket Field stored on our servers for your account straight away, and the phone signs out. Your Pocket licence stays, and so do the sounds on your phone and the sounds already in Pocket on your computer.
  • Delete your whole account. In Pocket Field, choose Delete whole account instead; in Pocket, open Settings, then Help, then Contact support and choose "Delete my account". Without either app, email sales@thesamplelab.com from your account's email address and ask to delete your account. Within 30 days we delete your account, your licence, your computers, recordings and kit covers held on our servers, loops, their records, support requests and diagnostic reports, sign Pocket out on every computer, and confirm by email. Sounds already on your phone or computer stay there. We keep your store order number, without your email, so a refund or chargeback can still be matched, and our store keeps its own records of your purchase as the law requires. You can also email us to request only Pocket Field data deletion; see the deletion instructions.
  • Get a copy of your data, or correct it. In Pocket, use Contact support and choose "Export my data", or write to us.

10. Your rights

Wherever you live, you can ask us to access, correct, export or delete your personal information, and we'll answer within 30 days.

If you're in the EU, the UK or Switzerland, we use your data to provide the account and the apps you asked for (contract), to keep them secure and answer you (our legitimate interests), when you choose to send a diagnostic report or hear news from us (your consent, which you can withdraw at any time), and to keep records the law requires (legal obligation). You can also object to or restrict our use of your data, and complain to your data protection authority. Our providers process data in the United States under safeguards such as the EU Standard Contractual Clauses.

If you're in California, we collect the kinds of information this policy describes: identifiers (your email and machine ID), records of your licence and purchases, recordings and loops you send (audio), kit covers (photos), kit names and artist names, and how Pocket and Pocket Field check in. We don't sell or share personal information, and we won't treat you differently for using your rights.

11. Children

Pocket and Pocket Field aren't meant for children under 13, and we don't knowingly collect their personal information. If you think a child has given us personal information, write to us and we'll delete it.

12. Security

Everything travels over encrypted connections. Recordings in transit sit in private storage, device tokens are kept only as hashes, and sign-in uses one-time codes rather than passwords.

13. Changes

If we change this policy, we'll update it here and change the date at the top. If a change matters to how we use your data, we'll tell you in the app or by email first.

14. Contact

The Sample Lab, sales@thesamplelab.com